General

  • Target

    JaffaCakes118_ffc1115fbe418e1cdc08a4383cfd4a806309846c6c618e21b7781eb4e3516444

  • Size

    115KB

  • Sample

    241227-b5lr8sylb1

  • MD5

    c6be6b21576843795f37a6e33be8dfaa

  • SHA1

    af03fd73cf0b7ed9015dfbe91acd7f661000933b

  • SHA256

    ffc1115fbe418e1cdc08a4383cfd4a806309846c6c618e21b7781eb4e3516444

  • SHA512

    e81ab216960d9024904bfd633f0f2d2732b20d2133bf73361237d6ab28bee19f5a93adc4a29e01a9b7900de8518e21ad1d57321abdf1d14d8474a12ec843f522

  • SSDEEP

    3072:pKky8tri60kFqa5qdU7e/hWoVlphadtAeAniyILAv0lLF:aWri5qH74A+phad+eAniyIsv0lLF

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

45.95.169.117:728

Targets

    • Target

      JaffaCakes118_ffc1115fbe418e1cdc08a4383cfd4a806309846c6c618e21b7781eb4e3516444

    • Size

      115KB

    • MD5

      c6be6b21576843795f37a6e33be8dfaa

    • SHA1

      af03fd73cf0b7ed9015dfbe91acd7f661000933b

    • SHA256

      ffc1115fbe418e1cdc08a4383cfd4a806309846c6c618e21b7781eb4e3516444

    • SHA512

      e81ab216960d9024904bfd633f0f2d2732b20d2133bf73361237d6ab28bee19f5a93adc4a29e01a9b7900de8518e21ad1d57321abdf1d14d8474a12ec843f522

    • SSDEEP

      3072:pKky8tri60kFqa5qdU7e/hWoVlphadtAeAniyILAv0lLF:aWri5qH74A+phad+eAniyIsv0lLF

    Score
    6/10
    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks